Tuesday, April 4, 2006

Simple Mode Certificate Duration

By default Oracle COREid simple mode certificates are issued for 1 year (365 days) by default. If you would prefer a different expiration time you can change the setting that controls the certificate's duration. There are two files that control the duration, each is used depending on the certificate (re)generation situation. I think it is best to just change both files to cover your bases.
  • <coreid_install_dir>/oblix/tools/openssl/openssl.cnf
  • <coreid_install_dir>/oblix/tools/openssl/openssl_silent.cnf
The paramater to change is "default days"...

default_days = 365 # Duration to certify for

Change this to the desired number and regenerate your simple mode certificate.

No comments:

Post a Comment